IT Security & Risk Officer IAM

01About the Role

We are looking for an experienced Senior Identity & Access Management (IAM) Specialist to strengthen and standardize identity and access security across multiple cybersecurity teams.

In this role, you will assess, redesign, and implement secure access controls using Microsoft Entra ID, Privileged Identity Management (PIM), and Single Sign-On (SSO). You will play a key role in improving access governance, reducing security risks, and establishing scalable identity management processes.

02Key Responsibilities

• Review and optimize identity and access permissions across cybersecurity teams.
• Restructure Microsoft Entra ID groups, naming conventions, and dynamic membership rules.
• Define clear separation between directory roles, application RBAC, and cloud resource permissions.
• Implement and enforce PIM, including approval workflows and privileged access controls.
• Separate standard user accounts from privileged and incident response identities.
• Integrate applications with SSO using modern authentication standards.
• Develop and automate Joiner, Mover, and Leaver (JML) processes.
• Establish regular access reviews and manager approval procedures.
• Collaborate with central IT IAM teams to implement security improvements.

03Required Skills & Experience

• Strong experience in Identity & Access Management (IAM) and access governance.
• Advanced knowledge of Microsoft Entra ID (Azure AD), PIM, and SSO.
• Experience with Role-Based Access Control (RBAC) and privileged access management.
• Understanding of authentication protocols such as SAML, OAuth 2.0, and OpenID Connect.
• Experience implementing automated identity lifecycle management and access reviews.
• Solid understanding of IT security, risk management, and least-privilege principles.
• Strong analytical, problem-solving, and stakeholder management skills.

04Personal Qualities

We are looking for a structured, proactive professional who enjoys improving complex IT environments. You are collaborative, communicate effectively with technical teams and stakeholders, and take ownership of delivering secure, practical, and sustainable solutions.